Use URL-based std/path import to unblock remote execution and clarify TLS whitelist domains

[Copilot]

Remote deno run usage was failing due to module resolution/certificate-chain issues in constrained environments. This change keeps runtime behavior intact while removing the package-specifier edge case and documenting the exact network domains required for successful dependency fetches.

• Dependency resolution hardening

  • Switched path re-export in deps.ts from jsr:@std/path to pinned URL import on deno.land/std.
  • This avoids JSR package dependency resolution pitfalls when running directly from raw GitHub URLs.

• Operational clarity for UnknownIssuer environments

  • Verified the minimal external hosts involved in startup/dependency resolution:
    • raw.githubusercontent.com
    • deno.land
    • jsr.io
  • No functional codepath changes beyond import source normalization.

// deps.ts
export * as path from "https://deno.land/std@0.213.0/path/mod.ts";

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.